Harvey
Legal AI platform sold to law firms and in-house teams, used by several UK firms. No published price.
Overview
Harvey is a legal AI platform for law firms and in-house legal teams. It offers an assistant for drafting and analysis, Vault for reviewing large sets of documents, and workflows a firm can configure for repeated tasks. Harvey now uses models from Anthropic and Google alongside OpenAI's (Harvey).
For solicitors in England and Wales
Harvey is sold in the UK and has a London office (careers). The UK firms it names as customers include A&O Shearman, which it says was the first law firm to implement Harvey at enterprise level in December 2022, and Ashurst, CMS and Burges Salmon (A&O Shearman, Ashurst).
It is built for large firms and legal teams with a procurement process, not for individual solicitors: there is no self-serve plan.
Pricing
Checked 29 September 2026. Harvey publishes no price. Its route to buy is a demo booked through the contact sales page.
Security and data
Checked 29 September 2026 against Harvey's security page.
- Training. Harvey contractually guarantees that it does not use inputs, outputs or uploaded documents to train the underlying models, and by default never trains on customer data. A firm can ask for a bespoke model trained on its own data.
- Model providers. Harvey requires zero data retention from the providers of the models it uses. Harvey itself keeps data under retention policies the customer sets.
- Where data is held. Harvey runs on Microsoft Azure and offers processing regions in the EU and Switzerland, the US, and Australia. It does not name a UK region (data sovereignty, June 2026).
- Certifications. Annual SOC 2 Type II and ISO 27001 audits.
Using it safely
- Harvey's answers still need checking. Paragraph 3.2 of the SRA Code of Conduct for Solicitors requires a competent service, and paragraph 3.5 keeps a supervisor accountable for work done through others.
- Before uploading client documents, confirm which processing region the firm's account uses and that it fits the firm's UK GDPR obligations.